Skip to content
Sign in
7.2 High

CVE-2022-4489 The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high…

Description

The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected products and versions

Product Affected versions Fixed in
HUSKY 1.3 earliest → < 1.3.2 1.3.2

Other CVEs of HUSKY

The 2 CVEs of HUSKY →
CVE-2026-15244 The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before… 7.2 High
Track this CVE